Vice President and Product Owner, Information Security - Continuous Controls Monitoring

Vice President and Product Owner, Information Security – Continuous Controls Monitoring (CCM) Job Classification: Technology - Agile, Delivery, & Product Are you interested in building security capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? As Vice President and Product Owner, Information Security – Continuous Controls Monitoring (CCM), you will unlock an exciting and impactful career, advancing your profession at a leading financial services institution. Role Overview You will set the strategic direction for secure baselines for infrastructure and application security across all of Information Security, identify cross‑functional automation opportunities, and develop scalable solutions to monitor risk and verify compliance. You will lead the enterprise capability to define, enforce, monitor and automatically validate the security posture of every compute surface the business runs on – physical and virtual servers, domain controllers, network platforms, SaaS platforms/applications, containers, Kubernetes workloads, endpoints, databases and host‑based DMZ enforcement points. Key Responsibilities Own the golden image and hardened baseline strategy for every supported OS, infrastructure platform, container base image, database, and DMZ host class aligned to CIS and industry benchmarks and tailored vendor baselines. Define drift detection, enforcement and auto‑remediation standard requirements to enable delivery partners to harden IT services, monitor deviations, and execute safe auto‑remediation. Drive patch management strategy (OS, 3rd party software, firmware) with risk indicators operationalised to define effectiveness and areas of risk. Define and implement orchestration reporting capabilities into the centralized reporting system (ServiceNow Configuration Compliance), including risk indicators and dashboards. Mature exception management processes for compensating controls, risk acceptance, and time‑bound remediation/expiry. Maintain vision, roadmap, backlog, user stories, acceptance criteria and release plan using scaled Agile; partner with engineering teams to deliver iteratively. Translate the Secure baseline security standard into defined control monitoring and enforcement plans, ensuring each control has defined tests, automated evidence collection, defined frequency, remediation ownership and an exception path. Automate evidence collection via API and telemetry from Guardium, CSPM/CNAPP, EDR, vulnerability and compliance scanners, IAM, code repos, CI/CD, etc., replacing point‑in‑time manual audits. Lead multi‑disciplinary teams of security engineers, infrastructure/platform engineers, Cloud engineering, IAM, Audit/compliance and DevOps. Communicate complex issues clearly to executive leadership, stakeholders and business partners. Key Knowledge & Skills OWASP Top10, OWASP LLM Top10, OWASP Agentic Top10 Regulatory frameworks (NIST‑800‑53 Rev5, CIS Benchmarks, SOC2, PCI/DSS, DORA, NIST AI RMF, AWS/Azure) ServiceNow Configuration Compliance, Vulnerability Scanners (Qualys), CSPM/CNAPP tools (Wiz), compliance tools (Guardium) Hardening capabilities (BigFix, Chainguard) 10+years in cybersecurity, infrastructure security, including 5+years in senior leadership of a security, platform, controls or compliance engineering function Certifications such as CISSP, CISM, CCSP, CISA, GIAC (GCCC, GCSA) or AWS/Azure security specialty Ability to coach others with minimal guidance and leverage diverse skill‑sets Experience with agile development methodologies and Test‑Driven Development (TDD) Compensation & Benefits Salary range: $192,900.00 – $289,300.00, varying by location, experience, and skills. In addition to a competitive base salary, you will be eligible for a yearly bonus potential at every level. Benefits include medical, dental, vision, life insurance, disability insurance, paid time off (PTO), and leave of absences such as parental and military leave. The company offers a 401(k) plan with a match up to 4%, company‑funded pension plan, wellness programs with up to $1,600‑year reimbursement, work‑life resources, educational benefits, and an employee stock purchase plan. Equal Opportunity Employer Prudential Financial, Inc. is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition, or any other characteristic protected by law. #J-18808-Ljbffr Prudential Annuities Distributors (PAD)